Records18All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9
Exploited now
xiph records in CISA KEVNo xiph vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 53
oc_huff_tree_unpack in huffdec.c in libtheora in Theora through 1.0 7180717 has an invalid negative left shift.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01841 · Published 2024-12-25 · Fix deferred CWE-863
Priority LOW 30
A flaw was found in libtheora.
CVSS 3.1HIGH 7.1· Local · No auth · User interaction · EPSS 0.00181 · Published 2026-04-06 · Fix deferred CWE-125
Open these records in search →